Tenant isolation
Every tenant gets its own database schema and encryption keys. No shared caches, no cross-tenant queries — security by design.
Platform
Architecture that earns trust.
Tenant-isolated. Encrypted. Audit-ready. MCP-ready. With native framework mappings and SharePoint distribution. 100% Made in Germany, hosted in the EU.
grc.deveca.app
Encryption and RBAC
AES-256 at rest, TLS 1.3 in transit. Granular RBAC with field-level rights and a complete audit log of every action (who · what · when · why).
Graph data model
Relationships between assets, risks, controls and suppliers as a native graph — including impact simulations and a live visualisation.
MCP and open API
REST/graph APIs for your own integrations plus a native Model Context Protocol server for Claude, ChatGPT and Microsoft Copilot.
Microsoft 365 / SharePoint
Two-way connection to SharePoint libraries and Teams. Automatic distribution, read acknowledgements and news.
Sovereign cloud
Hosting in Nuremberg, backup in Falkenstein. ISO 27001 certified data centre. German data residency — vendor and subprocessor review against documented sovereignty criteria.
Available now
Integrations
Native Microsoft 365 connection, MCP for AI assistants and an open REST/GraphQL API. Your own integration? Done through the API in hours.
Microsoft 365 / SharePoint
Microsoft Teams and Graph API
Slack (notifications and incident alerts)
MCP (Claude / ChatGPT / Copilot)
REST / GraphQL API (Professional+)
Webhooks inbound and outbound (Enterprise)
Stripe billing and customer portal
SSO with Microsoft Entra ID
Excel / CSV import · JSON export
In development
Next on the roadmap
Further SSO IdPs (SAML, OIDC, LDAP)
Personio and Salesforce (Enterprise)
Atlassian Jira and Confluence
Vulnerability scanners (Greenbone, OpenVAS, Nessus)
CMDB sync (ServiceNow, i-doit)